Forum Discussion

F5-Hopeful's avatar
F5-Hopeful
Icon for Nimbostratus rankNimbostratus
Oct 10, 2019

Session table with Virtual Command

Is anyone able to tell me if you can store data in the session table using an iRule on one VS then recover it on a second VS, if the second VS is called via the virtual command in an iRule on the fir...
application delivery
BIG-IP
iRules
virtual command
F5-Hopeful's avatar
F5-Hopeful
Icon for Nimbostratus rankNimbostratus
Oct 15, 2019

Hi, apologies for not giving enough information relating to this, and thank you for your help.

 

I tried your solution above but had to remove the 15 from TCP::collect as it would not work with that, I tried some larger numbers but that didn't work either. I am unable to put the config on now as I have to get it cleaned and approved before putting it up. I should hopefully be able to add it tomorrow. The value I am trying to add will actually be added under the CLIENTSSL_CLIENTCERT event but as this would not work I had moved it to CLIENT_ACCEPTED just to eliminate any race conditions that may have been occurring.

 

The main aim of what I'm trying to do is to get a value I pull from a certificate in iRule one into the session table so I can retrieve it in iRule 2. I have tried numerous times to raise a ticket with F5 but I have not had any reply and no pending tickets show tracked tickets.

 

The output is below from F5

 

iRule 1

Oct 15 20:04:28 ip-10-0-0-200 info tmm[9787]: CLIENT_ACCEPTED put 10.0.0.10 with value blocked in blacklist subtable

Oct 15 20:04:28 ip-10-0-0-200 info tmm[9787]: CLIENT_ACCEPTED collect 15 bytes of data

 

Oct 15 20:04:28 ip-10-0-0-200 info tmm[9787]: CLIENT_DATA  found client data

Oct 15 20:04:28 ip-10-0-0-200 info tmm[9787]: CLIENT_DATA  send to virtual vs-test-02

 

Oct 15 20:04:28 ip-10-0-0-200 info tmm[9787]: send to virtual vs-test-02

Oct 15 20:04:28 ip-10-0-0-200 info tmm[9787]: result is blocked

 

iRule 2

Oct 15 20:04:28 ip-10-0-0-200 info tmm[9787]: CLIENT_ACCEPTED result for 10.0.0.10 is .

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Oct 15, 2019

    ill wait for the complete irule to perhaps see something there, it find it weird it doesn't work for you with TCP::collect, that would suggest very small payloads are send.

     

    for fun you could add a delay before sending to the next virtual. all this feels like some race condition.

     

    you say you tried to raise tickets with F5 support, how did you do that? are you working with a bring your own license in AWS? or with F5 from the marketplace?

     

    you can try calling them to make sure the ticket gets created.